Resubmissions

14-11-2024 11:38

241114-nrpyysxrbs 10

28-09-2024 21:15

240928-z399tazbpe 10

28-09-2024 07:15

240928-h3mebatakq 10

General

  • Target

    responsibilityleadpro.exe

  • Size

    1.1MB

  • Sample

    240928-z399tazbpe

  • MD5

    1a0d1a5b8d79608abd5e5c4e17a6984d

  • SHA1

    53684af4212c1a2c36df047de09319dec585f987

  • SHA256

    545dce672f9a6cad9aa56f689a50403bebd68ca99c2a6b8806b28025f8b3b0a0

  • SHA512

    126b4ab447a4548c44a90d5846736c2a1d38d0be3b054e8b6675c8e88ec253899fd60629f9403f303d0757e5be045d6a386be806ae7be954058aad92c9d1a7f1

  • SSDEEP

    24576:BBZ3miL8N5aJO9bEO6R2L9AMaq15jQmzXrbvofFx1G6d7T+n:B3miL8mO9bEO6R6kSjQ03oY8T+n

Malware Config

Targets

    • Target

      responsibilityleadpro.exe

    • Size

      1.1MB

    • MD5

      1a0d1a5b8d79608abd5e5c4e17a6984d

    • SHA1

      53684af4212c1a2c36df047de09319dec585f987

    • SHA256

      545dce672f9a6cad9aa56f689a50403bebd68ca99c2a6b8806b28025f8b3b0a0

    • SHA512

      126b4ab447a4548c44a90d5846736c2a1d38d0be3b054e8b6675c8e88ec253899fd60629f9403f303d0757e5be045d6a386be806ae7be954058aad92c9d1a7f1

    • SSDEEP

      24576:BBZ3miL8N5aJO9bEO6R2L9AMaq15jQmzXrbvofFx1G6d7T+n:B3miL8mO9bEO6R6kSjQ03oY8T+n

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v15

Tasks